CVE-2023-35790: An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service,...
Description
An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
Classification
CVE ID: CVE-2023-35790
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.1% (probability of being exploited)
EPSS Percentile: 43.02% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)
References
https://github.com/libjxl/libjxl/releases/tag/v0.8.2https://github.com/libjxl/libjxl/pull/2551